Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Pw4apVwbpz6xPpXK_UFxz0DY8cM.roa
File: Pw4apVwbpz6xPpXK_UFxz0DY8cM.roa (raw, json)
Hash identifier: K9ZA6ThGjk37eU9Zv2DS6YdwFe7YcS1zDpxa5UybxUA=
Subject key identifier: 3F:0E:1A:A5:5C:1B:A7:3E:B1:3E:95:CA:FD:41:71:CF:40:D8:F1:C3
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0194214414B2DE3F08DFF5C0EC6A7DB6A964
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Pw4apVwbpz6xPpXK_UFxz0DY8cM.roa
Signing time: Wed 01 Jan 2025 09:48:17 +0000
ROA not before: Wed 01 Jan 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204957
IP address blocks: 193.8.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:14:b2:de:3f:08:df:f5:c0:ec:6a:7d:b6:a9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f0e1aa55c1ba73eb13e95cafd4171cf40d8f1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:15:da:06:f8:b5:24:70:a8:39:5c:33:4a:
1d:29:b1:5c:9e:4a:8b:a8:13:01:41:db:7d:71:e6:
d0:85:39:26:a6:a5:37:2c:1d:9e:e2:33:19:4e:78:
e8:5d:58:89:be:f0:4f:18:7f:b7:c4:8b:81:53:3c:
61:89:45:2a:75:a2:80:42:1d:b8:34:34:40:0e:de:
e9:83:cf:cc:4e:e2:96:cb:41:77:2a:0a:a7:4d:16:
67:d3:ea:9b:46:16:c0:7c:50:32:c0:6d:85:15:07:
12:94:ad:af:bd:6f:42:78:d4:2c:eb:9b:a3:26:39:
09:2e:29:84:99:30:36:36:d2:aa:72:0c:d5:07:2e:
58:5b:bc:85:95:83:11:92:fa:5f:d5:80:bb:a4:37:
fe:aa:10:6f:60:2a:53:ef:96:5a:27:ca:92:50:03:
22:e1:bd:49:0e:bb:d4:b7:9e:46:1a:ca:8b:fe:35:
73:f0:d9:ef:d7:ef:1e:70:58:b6:33:a1:bf:66:12:
44:ab:6b:50:24:93:a1:df:df:8f:22:96:c0:1f:d8:
e6:5c:29:b9:74:09:12:1b:8d:24:49:68:a4:8d:cd:
0c:ce:3e:a7:db:38:fa:e8:6e:79:3d:e9:97:0f:9a:
1a:6f:2b:fa:dd:43:e7:27:3b:c3:e5:c0:aa:c2:39:
9a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0E:1A:A5:5C:1B:A7:3E:B1:3E:95:CA:FD:41:71:CF:40:D8:F1:C3
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Pw4apVwbpz6xPpXK_UFxz0DY8cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.75.0/24
Signature Algorithm: sha256WithRSAEncryption
64:70:a0:50:ad:f7:af:27:f3:ee:78:5b:ef:ca:fb:a5:9a:d3:
1d:e8:4f:f5:ec:a9:0c:74:2c:e6:df:00:39:4f:ef:93:36:0e:
a7:b3:e1:6e:7d:78:71:c2:08:f2:ab:6d:80:77:ac:f5:4e:cc:
10:bb:b7:99:e3:8d:56:55:f4:5e:7c:7c:b6:b3:ba:2e:07:31:
1f:80:c3:5a:be:72:c6:4a:7f:6b:26:4b:04:0d:f1:35:f8:5e:
b8:f7:27:57:31:b0:f6:57:39:e6:4f:aa:d5:90:21:9a:b3:e2:
6e:ff:b4:b2:31:d8:af:13:1a:f6:83:16:4e:35:e0:a3:f2:2f:
a2:31:fc:a0:98:87:7e:d8:69:10:14:ba:c4:22:06:b1:ce:45:
df:14:54:64:ed:16:e9:d2:1c:6e:fe:23:fc:8a:94:cd:9a:91:
11:c3:6c:80:39:c0:03:b1:8e:f2:83:34:8a:81:4d:22:dd:6a:
3c:42:17:e3:a9:d4:1a:50:6b:34:1b:85:1d:ee:99:85:54:85:
cc:57:1f:43:e8:35:85:56:33:69:d9:81:0c:a1:65:be:92:71:
31:af:02:21:2d:b0:70:45:2b:b0:06:35:7e:55:85:c1:ea:5b:
69:41:a2:9a:80:8d:33:f6:6f:a3:52:23:7e:6e:3e:3e:f2:a5:
df:94:1c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:27:39 2025 by rpki-client